Oracle GENERATESCHEMA Buffer Overflow Exploit

This Exploit a buffer overflow in Oracle10g. When sending a specially formatted query to the GENERATESCHEMA function in the XDB.DBMSXMLSCHEMA package, an attacker may be able to execute arbitrary code. NOTE: For targets running DEP, you will need to choose target 0 then rexploit with target 1. Th...

CVE-2013-5433

The Data Growth Solution for JD Edwards EnterpriseOne in IBM InfoSphere Optim 3.0 through 9.1 has hardcoded database credentials, which allows remote authenticated users to obtain sensitive information by reading an unspecified field in an XML document...

Hardcoded credentials

The Data Growth Solution for JD Edwards EnterpriseOne in IBM InfoSphere Optim 3.0 through 9.1 has hardcoded database credentials, which allows remote authenticated users to obtain sensitive information by reading an unspecified field in an XML document...

CVE-2012-1678

The CVE-2012-1678 entry concerns an unspecified vulnerability in the JD Edwards EnterpriseOne Tools component within Oracle JD Edwards Products 8.98, 9.1, and 24. It allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC. The connected sources confir...

CVE-2011-2324

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote attackers to affect availability, related to Enterprise Infrastructure SEC JDENET...

Code injection

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC JDENET, a different vulnerability than CVE-2011-2325, CVE-2011-2326, and CVE-2011-3524...

Design/Logic Flaw

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect integrity, related to Enterprise Infrastucture SEC JDNET...

Code injection

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC JDNET...

Code injection

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote attackers to affect availability, related to Enterprise Infrastructure SEC JDENET...

Code injection

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC JDENET, a different vulnerability than CVE-2011-2325, CVE-2011-3509, and CVE-2011-3524...

Code injection

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC JDENET, a different vulnerability than CVE-2011-2325, CVE-2011-2326, and CVE-2011-3509...

Code injection

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC JDENET, a different vulnerability than CVE-2011-2326, CVE-2011-3509, and CVE-2011-3524...

CVE-2011-2326

CVE-2011-2326 affects Oracle JD Edwards EnterpriseOne components (Server + Tools 8.98, SP 24) and is tied to the JDENet/SAW kernel. A crafted JDENet packet to the JDENet Service enables remote access to information relevant to system confidentiality, per Onapsis-reported details, with the root ca...

CVE-2011-3509

CVE-2011-3509 affects Oracle JD Edwards 8.98 SP 24 (EnterpriseOne Tools) and is tied to the JDENet/SAW kernel information flow in the EnterpriseOne Tools stack. The vulnerability involves the JDENet/SAW kernel components, allowing a remote attacker to access confidential information related to th...

CVE-2011-2317

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect integrity, related to Enterprise Infrastucture SEC JDNET...

CVE-2011-2321

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC JDNET...

CVE-2011-2317

CVE-2011-2317 affects Oracle JD Edwards JDENET/EnterpriseOne Tools 8.98 SP 24. Affected component: JD ENET/Tools in JD Edwards EnterpriseOne. Root cause: Arbitrary file write via a crafted File Packet sent to the JDENet port (default 6015), enabling a remote attacker to save files on the server. ...

CVE-2011-2321

CVE-2011-2321 relates to Oracle JD Edwards JDENET/EnterpriseOne Tools 8.98 SP24. The Onapsis advisory describes an information disclosure vulnerability in JDENET, enabling an attacker to retrieve system configuration details (kernel/process information) via the JDENET service. The issue affects J...

CVE-2011-0836

Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Tools 8.9 GA through 8.98.4.1 and OneWorld Tools through 24.1.3 allows remote authenticated users to affect integrity, related to Web Runtime SEC...

CVE-2011-0823

Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Tools 8.9 GA through 8.98.4.1 and OneWorld Tools through 24.1.3 allows remote attackers to affect integrity, related to Enterprise Infrastructure SEC, a different vulnerability than CVE-2011-0819...